This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/K0zU8oY9hy4BxrhaddT9XZyYIxI.roa File: K0zU8oY9hy4BxrhaddT9XZyYIxI.roa (raw, json) Hash identifier: fDdjkQN2cPUa9iAXDpV3uTS4thCr8yKt7WjjEMcUFOo= Subject key identifier: 2B:4C:D4:F2:86:3D:87:2E:01:C6:B8:5A:75:D4:FD:5D:9C:98:23:12 Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Certificate serial: 019B7C1319DDC73FE135D10B6FCDD6F3512B Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/K0zU8oY9hy4BxrhaddT9XZyYIxI.roa Signing time: Fri 02 Jan 2026 00:19:45 +0000 ROA not before: Fri 02 Jan 2026 00:19:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 23383 IP address blocks: 217.76.246.0/24 maxlen: 24 2a05:a780::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:19:dd:c7:3f:e1:35:d1:0b:6f:cd:d6:f3:51:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Validity Not Before: Jan 2 00:19:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2b4cd4f2863d872e01c6b85a75d4fd5d9c982312 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c6:b9:f7:4a:f7:ce:be:7b:09:cf:b5:eb:00: e2:33:91:aa:71:ae:6b:7a:ad:4e:09:96:26:37:53: 24:d5:58:ec:f2:3c:14:d4:5f:05:31:df:ed:f9:4d: bc:18:28:81:32:a6:e8:ee:3b:97:a6:6a:cf:91:8d: 72:b6:8f:9b:fe:50:ce:c2:41:79:f6:a8:86:be:b4: d7:fa:b1:75:6a:8b:20:73:bc:a8:99:db:ce:6a:a5: f5:99:22:ce:9e:10:43:f4:92:e4:10:ba:5c:38:73: 0f:d8:ac:9c:59:0f:50:38:56:10:a3:a6:8c:53:c8: d4:8a:df:8e:1f:c7:f7:bd:f6:a6:7e:89:a8:d4:8c: a8:fc:04:95:fa:56:2f:44:ad:85:4d:6b:a2:94:d5: 99:37:ed:ec:1c:ed:88:ff:17:24:3a:2d:30:d4:3d: 58:ab:bb:68:c2:ee:d4:e2:9c:f6:0b:d8:4b:da:71: 61:52:46:01:b9:3a:70:f3:e2:a1:e0:5d:c6:3d:03: 94:42:4f:24:c2:83:16:0e:55:98:f3:13:54:67:92: 10:2e:d2:7a:37:38:2d:a9:51:c0:2d:f2:0a:93:3c: f7:7e:02:70:cb:8b:37:eb:14:1d:d2:0f:14:58:6a: 79:44:58:a9:b1:91:9c:9e:84:6c:48:f2:2f:76:4d: 8f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:4C:D4:F2:86:3D:87:2E:01:C6:B8:5A:75:D4:FD:5D:9C:98:23:12 X509v3 Authority Key Identifier: keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/K0zU8oY9hy4BxrhaddT9XZyYIxI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.76.246.0/24 IPv6: 2a05:a780::/48 Signature Algorithm: sha256WithRSAEncryption 77:9d:6f:6a:22:a9:68:59:76:a8:da:32:33:e3:fa:65:e1:b6: aa:f9:c6:28:c1:0a:63:95:b9:63:5d:fd:99:ac:82:8e:cb:79: c2:6d:1e:db:d1:8f:0d:3c:f3:ea:03:30:c4:de:03:88:cd:03: ec:e5:bf:f5:18:0d:72:c9:4c:e9:cb:5a:be:f9:36:35:9c:43: d2:33:e9:3c:c7:96:ee:2a:67:cd:b1:53:86:83:79:77:b5:7c: e8:92:b3:9d:e6:24:1d:16:a2:c0:c4:fa:3b:bd:bd:06:9b:55: 7b:9b:a0:15:e0:21:51:c0:c4:82:c9:a0:57:d9:99:f9:60:3e: 9d:2c:f8:4f:9a:e6:2d:7b:3e:d1:b6:03:d4:b7:c3:ab:b6:77: 29:1a:ae:4d:f3:69:03:fa:9d:88:69:b2:b0:bd:57:e7:79:0d: 14:6f:0d:93:4b:c2:f3:79:b9:9c:bc:0b:d3:f1:5c:7d:e8:23: aa:38:d8:8b:fb:5e:14:27:a4:24:0b:2c:0d:ec:cc:d1:0d:32: f7:45:76:b3:c6:53:bf:e2:00:9d:99:3d:5c:ea:69:10:93:fe: f9:bc:56:5c:1f:bf:f7:ec:7b:b1:08:be:fe:1f:cd:ef:e6:4f: e3:fc:26:51:fc:d3:e4:93:4f:ed:5e:38:87:4a:43:e8:7a:af: 16:99:f8:fe -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt8Exndxz/hNdELb83W81ErMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy N2E0NjcwHhcNMjYwMTAyMDAxOTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjRjZDRmMjg2M2Q4NzJlMDFjNmI4NWE3NWQ0ZmQ1ZDljOTgyMzEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8a590r3zr57Cc+16wDiM5Gqca5r eq1OCZYmN1Mk1Vjs8jwU1F8FMd/t+U28GCiBMqbo7juXpmrPkY1yto+b/lDOwkF5 9qiGvrTX+rF1aosgc7yomdvOaqX1mSLOnhBD9JLkELpcOHMP2KycWQ9QOFYQo6aM U8jUit+OH8f3vfamfomo1Iyo/ASV+lYvRK2FTWuilNWZN+3sHO2I/xckOi0w1D1Y q7towu7U4pz2C9hL2nFhUkYBuTpw8+Kh4F3GPQOUQk8kwoMWDlWY8xNUZ5IQLtJ6 NzgtqVHALfIKkzz3fgJwy4s36xQd0g8UWGp5RFipsZGcnoRsSPIvdk2PFwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFCtM1PKGPYcuAca4WnXU/V2cmCMSMB8GA1UdIwQY MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt Y2Q3ZTA2Y2JiNTMxLzEvSzB6VThvWTloeTRCeHJoYWRkVDlYWnlZSXhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQA2Uz2MA8E AgACMAkDBwAqBaeAAAAwDQYJKoZIhvcNAQELBQADggEBAHedb2oiqWhZdqjaMjPj +mXhtqr5xijBCmOVuWNd/Zmsgo7LecJtHtvRjw088+oDMMTeA4jNA+zlv/UYDXLJ TOnLWr75NjWcQ9Iz6TzHlu4qZ82xU4aDeXe1fOiSs53mJB0WosDE+ju9vQabVXub oBXgIVHAxILJoFfZmflgPp0s+E+a5i17PtG2A9S3w6u2dykark3zaQP6nYhpsrC9 V+d5DRRvDZNLwvN5uZy8C9PxXH3oI6o42Iv7XhQnpCQLLA3szNENMvdFdrPGU7/i AJ2ZPVzqaRCT/vm8Vlwfv/fse7EIvv4fze/mT+P8JlH80+STT+1eOIdKQ+h6rxaZ +P4= -----END CERTIFICATE-----Generated at Fri Jan 23 18:51:42 2026 by rpki-client